Tag: buffer overflow

27 articles

A lone, unoccupied PDF printer sits on a cluttered shelf in a dimly lit server room.

Ghostscript Flaw Exposes Servers to Remote Code Execution via PDFs

A critical flaw in Ghostscript, a popular PostScript and PDF interpreter, can be exploited by hackers to remotely execute code on vulnerable servers - simply by processing a specially crafted PDF file. This severe vulnerability, known as a heap buffer overflow, can be triggered by a malicious PDF containing a JPEG 2000 image with specific characteristics.

Analyst 207Oct 13, 2026

Router sits on table amidst cables and networking gear in a home office setting.

D-Link Routers Expose Zero-Day Flaw to Remote Attacks

D-Link routers are under threat from a zero-day flaw that lets hackers launch remote attacks without needing login credentials, simply by sending specially crafted DHCP packets. This vulnerability can cause the device's DHCP daemon to crash or allow attackers to execute malicious code, putting your data at risk.

Analyst 207Sep 22, 2026

Network switch on a rack surrounded by cables and equipment in an IT room.

CISA Flags Active Exploitation of Zyxel, Veeam Flaws

The US Cybersecurity and Infrastructure Security Agency (CISA) has sounded the alarm on a high-severity Zyxel vulnerability, warning that hackers are actively exploiting it to gain control of unpatched GS1900 series switches. This critical flaw, now patched, has a CVSS score of 8.8 and could allow attackers to execute malicious OS commands via a simple HTTP request.

Analyst 207Sep 22, 2026

Network operations room with servers, firewalls, and cables, with a single alert light illuminated on one rack.

Check Point Flaw Enables Hackers to Execute Code with Root Privileges

A critical flaw in Check Point's Security Management Server has been discovered, leaving all deployments vulnerable to hackers who can exploit it to execute code with root privileges, putting the entire firewall estate at risk. This severe vulnerability, tracked as CVE-2026-91843, requires immediate attention with Check Point releasing security updates to fix the issue.

Analyst 207Sep 18, 2026

Close-up of industrial computer server in softly lit corporate data center.

SAP Discloses Maximum-Severity Kernel Vulnerability

Over 10,000 SAP systems are exposed to the public internet, making them vulnerable to a newly disclosed maximum-severity kernel flaw, CVE-2026-44756, that allows attackers to gain admin privileges and take control. This critical vulnerability, dubbed OVERPASS, is a buffer overflow flaw that can be exploited to run arbitrary commands on vulnerable systems.

Analyst 207Sep 8, 2026

Network switch centered on a neutral background in a data center or factory setting.

HPE Fixes Remote Code Execution Flaw in ArubaOS-CX

HPE has patched a critical flaw in ArubaOS-CX that could let hackers run malicious code with elevated privileges - and all they need to do is send specially crafted packets to an affected device. This remote code execution vulnerability, tracked as CVE-2026-73749, is a serious threat that demands immediate attention.

Analyst 207Sep 3, 2026

A network router sits on a clean surface with a blurred background, conveying vulnerability.

OpenWrt Fixes Critical DHCPv6 Flaw That Exposes Root Code Execution Risk

OpenWrt has patched a critical DHCPv6 flaw, known as CVE-2026-53921, that could allow an unauthenticated attacker to execute root code by sending a crafted request to the DHCPv6 server. This severe vulnerability, rated 9.8 out of 10, highlights the importance of updating your OpenWrt setup to prevent potential security breaches.

Analyst 207Jul 28, 2026

Network operations room with a cracked screen symbolizing exploited vulnerability.

Palo Alto Networks Exploits Critical PAN-OS Flaw in Limited Attacks

Palo Alto Networks has patched a critical flaw in its PAN-OS software, CVE-2026-0300, which allowed hackers to execute malicious code with root privileges - and the company says it's already been exploited in targeted attacks. The vulnerability, a buffer overflow in the User-ID Authentication Portal service, could be triggered by sending specially crafted packets.

Analyst 207May 14, 2026

Network device in a brightly-lit tech environment with blurred background infrastructure.

Palo Alto Networks Discloses Active Exploitation of PAN-OS Flaw Enabling Espionage

Palo Alto Networks has uncovered active exploitation of a high-severity flaw in PAN-OS software, allowing attackers to execute arbitrary code with root privileges and inject shellcode into vulnerable systems. This critical vulnerability, tracked as CVE-2026-0300, enables unauthenticated remote code execution, putting affected appliances at risk of espionage.

Analyst 207May 7, 2026

Network security device on a rack in a clean, bright environment.

Palo Alto Networks Discloses Zero-Day Flaw in PAN-OS Software

Palo Alto Networks has issued a warning about a zero-day flaw in its PAN-OS software, tracked as CVE-2026-0300, which allows unauthenticated remote code execution with root privileges. This buffer overflow vulnerability in the User-ID Authentication Portal poses a high risk to PA-Series and VM-Series firewalls.

Analyst 207May 7, 2026

Network equipment and cables surround a central firewall device in a data center.

Palo Alto Firewalls Targeted in Active Exploitation

Thousands of Palo Alto firewalls are at risk due to an actively exploited vulnerability, CVE-2026-0300, that allows hackers to execute arbitrary code with root privileges. This alarming flaw affects 5,821 internet-exposed VM-Series firewalls, leaving them open to potential cyber attacks.

Analyst 207May 6, 2026

Brightly-lit network operations environment with a firewall on a rack amidst surrounding equipment.

Palo Alto Networks Firewalls Targeted in Zero-Day Exploits

Palo Alto Networks firewalls are under attack by zero-day exploits targeting a vulnerability in the User-ID Authentication Portal, allowing hackers to execute malicious code with root privileges. This buffer overflow flaw, tracked as CVE-2026-0300, poses a significant risk to organizations with Internet-exposed firewalls.

Analyst 207May 6, 2026

Network equipment and firewall device on a rack with cables, under ordinary lighting.

Palo Alto Networks Flaw Exploited for Remote Code Execution

A critical vulnerability in Palo Alto Networks' PAN-OS software has been exploited, allowing hackers to execute malicious code with root privileges on firewalls - and all it takes is a few specially crafted packets. This buffer overflow flaw, tracked as CVE-2026-0300, puts PA-Series and VM-Series firewalls at risk of remote code execution attacks.

Analyst 207May 6, 2026

Magnifying glass hovers over cracked screen with eerie glow, set against dark cityscape at dusk.

Google AI Stunningly Exposes 5 Critical Safari WebKit Flaws

Googles AI, Big Sleep, exposed five critical security flaws in WebKit — including a buffer‑overflow that could trigger crashes or memory corruption. It’s a stark reminder that AI speeds up vulnerability discovery, shortening the window defenders have to patch Safari’s engine before attackers catch up.

Analyst 207Nov 4, 2025